Pi-Hole: https://pi-hole.net/
Especially interesting for on-premises Cloudrons

• Network-wide ad blocking via your own Linux hardware
• Block Over 100,000 Ad-serving Domains: Known ad-serving domains are pulled from third party sources and compiled into one list.
• Block Advertisements On Any Device: Network-level blocking you to block ads in non-traditional placed such as mobile apps and smart TVs, regardless of hardware or OS.
• Improve Overall Network Performance: Since ads are blocked before they are downloaded, your network will perform better.
• Reduce Cellular Data Usage: Pair your Pi-hole with a VPN for on-the-go ad-blocking and save on data costs.
• Monitor Performance And Statistics: The Web interface shows how many ads were blocked, a query log, and more.
• API: Utilize Pi-hole’s API in your scripting or programing projects.

Docker image: https://hub.docker.com/r/diginc/pi-hole/
Pi-Hole on Docker how-to: https://dxpetti.com/blog/2018/running-pi-hole-on-docker/ (part 1) and https://dxpetti.com/blog/2018/keeping-your-pi-hole-container-fresh-with-cron/ (part 2)

Homepage: https://github.com/zadam/trilium
Screenshots: https://github.com/zadam/trilium/wiki/Screenshot-tour
Docker server installation: https://github.com/zadam/trilium/wiki/Docker-server-installation

Features

• Notes can be arranged into arbitrarily deep tree. Single note can be placed into multiple places in the tree (see cloning)
• Rich WYSIWYG note editing including e.g. tables and images with markdown autoformat
• Support for editing notes with source code, including syntax highlighting
• Fast and easy navigation between notes, full text search and note hoisting
• Seamless note versioning
• Note attributes can be used for note organization, querying and advanced scripting
• Synchronization with self-hosted sync server
• Strong note encryption with per-note granularity
• Relation maps for visualizing notes and their relations
• Scripting - see Advanced showcases
• Scales well in both usability and performance upwards of 100 000 notes
• Touch optimized mobile frontend for smartphones and tablets
• Night theme
• Evernote and Markdown import & export

Builds

Trilium is provided as either desktop application (Linux, Windows, Mac) or web application hosted on your server (Linux).

• If you want to use Trilium on the desktop, download binary release for your platform from latest release, unzip the package and run trilium executable.
• If you want to install Trilium on server, follow this page.
  • Currently only recent Chrome and Firefox are supported (tested) browsers.

From: https://docs.rsshub.app/en/

RSSHub is a lightweight and extensible RSS feed aggregator, it's able to generate feeds from pretty much everything.

Perfect companion to TT-RSS, I think.

Examples: https://docs.rsshub.app/en/#application-updates and below

Manual Deployment: https://docs.rsshub.app/en/install/#manual-deployment
Docker Deployment: https://docs.rsshub.app/en/install/#docker-deployment

I‘m a lawyer working in the field of i.a. data privacy law who is just very interested in tech and likes to run things at home. Also, the rules of our profession require us to not give data of our clients to any third party which rules the use out most US based web services.

My private Cloudron running on a ASRock Beebox N3000 at home...
Just the bare necessities for me. Waiting for Pi Hole / Wireguard and Plex!

I haven't created a topic in App Wishlist yet before knowing more: Has anybody tried "Snappymail", a fork of Rainloop?

https://github.com/the-djmaze/snappymail
https://snappymail.eu/

Demo: https://snappymail.eu/demo/

Simple, modern, lightweight & fast web-based email client.

Booting with 200 KB download (using Brotli) and a 92% mobile performance grade by Lighthouse.

This is a fork of the much appreciated RainLoop, but with massive changes to be compatible with (mobile) browsers in 2020.

Checkout the source, releases and wiki at https://github.com/the-djmaze/snappymail

@imc67 explained how to block IP ranges from certain countries
I think it would be useful if such lists (e.g. from https://www.ipdeny.com/ipblocks/) could be kept updated automatically, e.g. by running an update script regularly.

The same applies for spamassassin lists, e.g. the excellent Spamassassin lists from Heinlein who runs www.mailbox.org

@robi said in Best privacy chat apps:

Telegram seems to be upholding their censorship free platform so far..

... and thus has attracted extremist, neo-nazis and covid deniers...

For those who want to use Syncthing on iOS (up- / download of files, manual syncing of folders):

As you know, there's no iOS client. Inspired by this Reddit thread, I successfully configured the free iOS Documents App to access the Synthing main pool. You can probably use any App that allows SFTP connections.

• Precondition: VPN Access from the iOS device to your Cloudron instance (in my case, since Cloudron sits on a server at home, I establish a VPN connection to my router - but it should work with the Cloudron OpenVPN App as well(?)
• Open Documents, add a new SFTP connection with the following parameters (see screenshot in German below)
  • Name: Anything you want (e.g. "Syncthing")
  • Host: local IP of your Clourdon, e.g. 192.168.1.27
  • Login: SSH username
  • Password: SSH password or use "Private Key" section - Documents allows to use a private SSH key
  • Encryption: left unchanged
  • Port: SSH Port (e.g. 202)
  • Login Path: the path to your Syncthing main pool, which should be /home/yellowtent/appsdata/[APP-ID]/data/folders; you'll find the APP-ID in the "Resources" tab of your Synthing config on Cloudron

Voilá, you should see all folders you manage in Syncthing. Documents allows to mark such folders for syncing, these are then accessible in the "Sync Folders" tab and can be synced manually any time. Upload and download of files from / to Syncthing works and such changes are reflected on all machines. Downloaded files can be opened / viewed / shared within the Documents App.

https://github.com/janeczku/calibre-web/releases/tag/0.6.10

New features:

• User Password change on cli
• Added correct mimetype for azw3 files
• Improved errorhandling for user database
• More informations are logged in debug mode
• Debug Information and logbooks are downloadable via web UI
• Gdrive callback is only parsed with activated metadata watch
• LDAP user import now capable to import from Windows-AD
• Kobo sync can handle large libraries
• Filechooser dialog for calibre-database and other external files (use -f option for unconfigured Calibre-Web instances)
• Advanced search has now Multiselects, making the UI easier for libraries with many series, tages, languages, file formats
• Read Status is searchable
• Shelfs can additionally sorted according to name, date, ...
• Read status is visible on Cover pictures
• Admin page layout optimized
• Txt Reader now detects correct encoding
• Kepub is prefered during kobo sync
• Forward Overdrive requests to Kobo Store
• Drag 'n drop for fileuploads
• Convert from and convert to are now matching calibre's capabilities
• Shrinked size of generic cover
• When serving a download URL via KoboSync, use a URL that is specific to Kobo
• Removed Gevent Tracebacks with SSL encryption
• Save view settings
• Delete user is now a separate button
• Paginated search, advanced search, and shelfs
• Downloaded books is no longer part of admin page (admins currently can't check which books are downloaded by other users)
• Added greek translation

Bug Fixes:

• Downloads are now allowed for opds links, with ldap login and a cookie in the download request
• Download rights of guest user are now respected again
• Browser caching problem on cover change solved
• Import rarfile v4.0 fails no longer on python3.5
• No password prompt for anonymous browsing with LDAP login
• Missing audio icon for other audio formats than mp3 added
• Invalid timestamps during kobo sync caused by malformed database no longer crash the application
• Conversion of multiple formats of one book in the queue with gdrive is fixed
• Failed email and conversions with gdrive are now working correctly

Changes behind the scenes:

• Pillow is removed as dependency
• Pydrive2 can be used additionally to Pydrive
• Updated epub.js library
• Updated minimum Sqlalchemy version

Great to see some major developments for this app!
https://github.com/roundcube/roundcubemail/releases/tag/1.5-beta

This is a beta release for the next major version 1.5 of Roundcube webmail. With this milestone we introduce new features and long-awaited improvements. The most noteworthy additions are:

• PHP 8.0 support
• OAuth2/XOauth support
• Dark mode for Elastic skin
• Collected recipients and trusted senders
• Moving recipients between inputs with drag & drop
• Full unicode support with MySQL database
• Cache refactoring

Adding support for PHP 8 required some deep refactoring of the Roundcube codebase which started with early PHP 5 versions. However, this refactoring also was a bit of a cleaning procedure and resulted in more testable components.

In case you're running Roundcube directly from source or if you're not using the complete package, you need to install 3rd party javascript modules using the bin/install-jsdeps.sh script. With this release the toolchain required to build a functional package has changed a bit:

• bin/jsshrink.sh: replaced google-closure-compiler with UglifyJS
• bin/cssshrink.sh: replaced yuicompressor with csso
• Elastic theme: require lessc >= 2.5.2 (and add support for v4) with less-plugin-clean-css

This is a beta release and we recommend to test it on a separate environment.
And don't forget to backup your data before installing it.
CHANGELOG

• Require PHP >= 5.5
• Support PHP 8.0 (#7625)
• Require php-intl
• Remove use of Net_IDNA2 package
• Require GuzzleHttp\Client
• Upgrade to TinyMCE 5.5.1
• Upgrade to jQuery 3.5.1 (#7464)
• Update build tools (#7800, #7804, #7497):
  • jsshrink.sh: Replace google-closure-compiler with UglifyJS
  • cssshrink.sh: Replace yuicompressor with csso
  • require lessc >= 2.5.2 (and add support for v4) with less-plugin-clean-css for Less files compilation
• Automatically collected recipients and trusted senders (#6904)
  • Added configurable Collected Recipients addressbook source (#4971)
  • Added configurable Trusted Senders addressbook source (#5046)
  • Added 'contact_exists' hook
  • Added separate "trusted senders" options for show_images and mdn_request preferences (#7614)
• Contact form mode: private/business (#7630)
• OAuth/XOauth support (#7425, #6933)
• Cache refactoring (#6312)
• Added special value 'email' to login_username_filter, it changes also logon input type (#7179)
• Allow array in smtp_host config (#7296)
• Support proxy for server-side HTTP requests (#7658)
• By default do not set the User-Agent header (#7731)
• Add posibility to (re-)define field mapping on contacts import from a CSV file (#7045, #6668)
• Move "On request for return receipt" from "Mailbox View" to "Displaying Messages" (#7614)
• Support RFC8438: IMAP STATUS=SIZE - for faster folder size calculation (#7269)
• MySQL: Use utf8mb4 charset and utf8mb4_unicode_ci collation (#6535, #7113)
• Allow NULL in users.preferences column in postgres and sqlite db, the same as for other engines (#7767)
• Support for language codes up to 16 chars long (e.g. es-419) in database schema (#6851)
• Relaxed domain name validation for extended TLDs support (#5588)
• Allow opening application/octet-stream attachments according to filename extension (#6821)
• Added support for INSERT OR REPLACE queries (#6771)
• Allow skins to define which layout options they support (#7235)
• Extract RFC2231 attachment name from message headers (#6729, #6783)
• Add support for SameSite cookie attribute via session_samesite option (req PHP >= 7.3.0) (#6772)
• Change folders sorting so shared/other users namespaces are listed last (#5012)
• Display a warning and do not try to open empty attachments (#7332)
• Return 204 rather than 404 on missing contact photo (#7777)
• Add 'reconnect' plugin to retry IMAP connection (#7844)
• Plugin API: Added 'message' argument to 'message_compose_body' hook
• Plugin API: Added 'preferences' parameter to 'user_create' hook (#7692)
• Elastic: Dark mode (#6709)
• Elastic: Display email size on the list of messages (#7162)
• Elastic: Replace properties sidebar with a dialog on the attachment preview page (#7635)
• Elastic: Minimize forms/colors blink on page load
• Elastic: Improve mail header "detailed mode" (#7224)
• Elastic: Moving single recipients between recipient inputs with drag-n-drop (#5069)
• Elastic: Display a special icon for other users and shared namespace roots (#5012)
• Elastic: Support space-separated email addresses in recipient input (#6529, #6457)
• Elastic: Remember list checkbox selection state (#7148)
• Elastic: Add "Open in new window" in mail compose (#7260)
• Elastic: Make custom less files optional (#7497)
• Elastic: Prevent from opening mail preview in a new window on touch devices using double tap (#7732)
• Templates: Add support for expressions in object attributes (#7237)
• Templates: Add support for nested if conditions (#6818)
• Templates: Make [space][slash] ending of condition objects optional (#6954)
• Mailvelope: Fix size of iframe for PGP-inlined mail (#7348)
• Mailvelope: Add config option to use Main Keyring (#7348, #7157)
• Mailvelope: Add config option to set the size for new keys (#7348)
• Mailvelope: Always ask before discarding email currently being composed (#7348)
• Mailvelope: Fix unnecessary warning to re-add attachments when restoring a draft (#7348)
• Archive: Added options to split archive by year or year+month and folder (#7216)
• Enigma: Support ECC key generation - when using GnuPG >= 2.1.7 (#6853)
• Managesieve: Add support for 'spamtest' extension - RFC3685 (#6950)
• Managesieve: Allow display name with email address in vacation :from field (#6760)
• Managesieve: Improve UX on custom header input (#7207)
• Managesieve: Fix bug where activation of forward/vacation rule could activate a wrong script (#7423)
• Managesieve: Fix bug where forward/vacation rule could end up being duplicated (#7349)
• new_user_identity: Fix missing password for user-specific LDAP operations (#7667)
• Password: Added 'pwned' password strength driver (#7274)
• Password: Added Mail-in-a-Box (miab) driver (#7824)
• Password: Added TinyCP driver (#7510)
• Password: Added httpapi driver to connect to generic HTTP/HTTPS APIs (#7439)
• Password: Added dovecot_passwdfile driver (#5786)
• Password: Removed old 'cpanel' driver, 'cpanel_webmail' driver renamed to 'cpanel' (#7780)
• Fix handling of address groups in email headers by ignoring their names (#7663)
• Fix so message flags are updated on refresh also for multifolder search results (#7774)
• Fix so IMAP ID command is send only after authentication (#7517)
• Fix bug where it wasn't possible to save Spanish (Latin America) locale preference (#7784)
• Fix mail search error on invalid search_mods definition (#7789)
• Fix error when dealing with message/rfc822 attachments using Gmail IMAP (#6854)
• Fix ISO-2022-JP-MS encoding issues (#7091)
• Fix so messages in threads with no root aren't displayed separately (#4999)
• Fix so anchor tags without href attribute are not modified (#7413)
• Fix invalid IMAP SEARCH command in some rare case on messages cache synchronization (#7895)
• Fix so allowing remote resources does not add an entry to browser history (#6620)

Changelog: https://nextcloud.com/changelog/
Security and big fixes

@privsec said in Need a reliable data storage and backup application, nextcloud is not it:

@murgero How would you download the backups to browse through them? I have encryption enabled on the app so I believe this would prevent that, right?

It sounds more like an encryption and not a corruption issues. Have you changed / switched off/on Nextcloud encryption and / or changed the password?

I remember I had a similar issue a few years ago when I switched off encryption for all NC users as admin but the files were all there and just had to be decrypted correctly.

@mehdi
The FAQ is not binding in any way. Only the license text is binding and (purposefully) vague (in order to create uncertainty and thus motivate companies to license).
As a lawyer, I would not recommend to built a business on the mere hope that implementing MongoDB code is conforming to the License Agreement.

@mehdi
Nope, Sec. 13 of the license does contain „selling“ a service, it speaks of „make the functionality of the Program (…) available to third parties“.
If you provide access to a MongoDB instance - e.g. you host an app that others can interact with - and that uses MongoDB, you’re in.

And the definition of „Service Source Code“ - the one you have to publish - is extremely broad.

The same applies to Elastic / Kabana by the way, they switched to SSPL as well (they also use Elastic V2 license but that’s worse).

@nebulon @girish
Just thinking out loud here but have you considered the consequences of MongoDB‘s license (SSPL = Server Side Public License) for apps on a Cloudron yet? I came across it at my work recently and it’s a quite drastic „viral“ copyleft license:

13. Offering the Program as a Service.

If you make the functionality of the Program or a modified version available to third parties as a service, you must make the Service Source Code available via network download to everyone at no charge, under the terms of this License. Making the functionality of the Program or modified version available to third parties as a service includes, without limitation, enabling third parties to interact with the functionality of the Program or modified version remotely through a computer network, offering a service the value of which entirely or primarily derives from the value of the Program or modified version, or offering a service that accomplishes for users the primary purpose of the Program or modified version.

“Service Source Code” means the Corresponding Source for the Program or the modified version, and the Corresponding Source for all programs that you use to make the Program or modified version available as a service, including, without limitation, management software, user interfaces, application program interfaces, automation software, monitoring software, backup software, storage software and hosting software, all such that a user could run an instance of the service using the Service Source Code you make available.

So I think it does not affect the Cloudron source code but potentially the source code on all apps using MongoDB.

Overview: https://www.percona.com/blog/2020/06/16/why-is-mongodbs-sspl-bad-for-you/

That high performance backend for sync sounds exiting….

Changelog: https://nextcloud.com/changelog/
Announcement: https://nextcloud.com/blog/nextcloud-hub-21-out-with-up-to-10x-better-performance-whiteboard-and-more-collaboration-features/

The biggest improvements we introduce with Nextcloud 21 are:

High Performance Back-end for Nextcloud Files: reduces server load from desktop clients and web interface polling by 90% while delivering instant notifications to users.
And a wide range of performance improvements all over on top, decreasing loading times of pages and reducing load on the server
Collaborative features: new Whiteboard, author colours in Text and Document Templates to increase team productivity
Nextcloud Talk: debuts message status indicators, a raise hand feature, a group conversation description and more!
A range of Groupware improvements like drag'n'drop and nicer threading in Mail and syncing social media avatars in Contacts.

https://github.com/roundcube/roundcubemail/releases/tag/1.4.11

Security fix

Fix cross-site scripting (XSS) via HTML messages with malicious CSS content
Credits for this finding go to Mateusz Szymaniec (CERT Polska).

This version is considered stable and we recommend to update all productive installations of Roundcube with it.
Please do backup your data before updating!

CHANGELOG

• Display a nice error informing about no PHP8 support
• Elastic: Fix compatibility with Less v3 and v4 (#7813)
• Fix bug with managesieve_domains in Settings > Forwarding form (#7849)
• Fix errors in MSSQL database update scripts (#7853)
• Security: Fix cross-site scripting (XSS) via HTML messages with malicious CSS content

@marcusquinn said in bitwarden_rs 1.19 has been released:

@necrevistonnezr I seem to remember a Tweet where they were introducing a succession management or emergency access system into it.

Not sure if anyone's looked into that but I think increasingly important in a digital age where value is locked away with encrypted access.

You mean this?! https://bitwarden.com/help/article/emergency-access/

Establishing Emergency Access to a Vault is available for Premium users, including members of Paid Organizations (Families, Teams, or Enterprise), but anyone with a Bitwarden account can be designated as a trusted emergency contact (i.e. your trusted emergency contacts do not need to have Premium).

https://github.com/dani-garcia/bitwarden_rs/releases/tag/1.19.0

Updated the admin interface:

• Added diagnostic and debug information.
• Added option to sort users by date.
• Added ability to modify a user's type in an organization and to delete the whole organization.
• Added support for the Personal Ownership policy, which when enabled disables the use of the personal vault to non-admin users of an organization.
• Improved shutdown behavior on Docker images, now should handle SIGTERM better.

Basic experimental support for LDAP import using the official Directory Connector.

• Note that users can't be created by this tool, it only can add or remove them from an organization.
• Autoimported users join the organization with user level and they need to be confirmed by an admin or owner from the web vault. If SMTP is enabled, users will need to accept the email invitation beforehand.
• Important: enabling the checkbox "Overwrite existing organization users..." in the Directory Connector can cause already existing users from the organization to be removed when syncing if they aren't present in the LDAP server, while the official server differenciates between manually added and autoimported users, and won't delete the manually added ones. This only applies to the user level, and not to managers, admins or owners, and will probably be changed in the future to align with upstream.

Updated web vault to 2.18.1.
Docker images are now built with docker buildx, which results in correct platform metadata.
Added opencontainers.org labels to Docker images.
Synced global domains data with upstream